Ò»¡¢ÊÂÎñÅä¾°

±±¾©Ê±¼ä6ÔÂ27ÈÕÍí¼ä£¬£¬£¬£¬£¬£¬¾ÝÍâÑóýÌåHackerNews±¬ÁÏ£¬£¬£¬£¬£¬£¬Ò»ÖÖÀàËÆÓÚ“WannaCry”µÄÐÂÐÍÀÕË÷²¡¶¾Ï¯¾íÁËÅ·ÖÞ£¬£¬£¬£¬£¬£¬ÎÚ¿ËÀ¼¾³ÄÚµØÌú¡¢µçÁ¦¹«Ë¾¡¢µçÐŹ«Ë¾¡¢Çжûŵ±´ÀûºËµçÕ¾¡¢ÒøÐÐϵͳµÈ¶à¸ö¹ú¼ÒÉèÊ©¾ùÔâѬȾµ¼ÖÂÔËÐÐÒì³£¡£¡£¡£¡£¡£¸Ã²¡¶¾Îª“Petya”±äÖÖ²¡¶¾£¬£¬£¬£¬£¬£¬Í¨¹ýÓÊÏ丽¼þÈö²¥¡£¡£¡£¡£¡£Áí¾ÝÎÚ¿ËÀ¼CERT¹Ù·½ÐÂÎųƣ¬£¬£¬£¬£¬£¬ÓÊÏ丽¼þ±»È·ÈÏÊǸôβ¡¶¾¹¥»÷µÄÈö²¥Ô´Í·¡£¡£¡£¡£¡£¸ÃÀÕË÷²¡¶¾ÔÚÈ«Çò¹æÄ£ÄÚ±¬·¢£¬£¬£¬£¬£¬£¬Êܲ¡¶¾ÇÖÏ®µÄ¹ú¼Ò³ýÁËÎÚ¿ËÀ¼Í⣬£¬£¬£¬£¬£¬ÉÐÓжíÂÞ˹¡¢Î÷°àÑÀ¡¢·¨¹ú¡¢Ó¢¹úÒÔ¼°Å·ÖÞ¶à¸ö¹ú¼Ò£¬£¬£¬£¬£¬£¬ºóÐø²»É¨³ý»á¼ÌÐøÉìÕŵ½°üÀ¨ÖйúÔÚÄÚµÄÑÇÖÞ¹ú¼Ò¡£¡£¡£¡£¡£

¶þ¡¢²¡¶¾ÆÊÎö

¾­ÓÉaggame¹ÙÍøÇå¾²²úÆ·ÊÂÒµ²¿µÄÈ¡Ö¤Ñо¿£¬£¬£¬£¬£¬£¬Õâ´Î¹¥»÷ÊÇÀÕË÷²¡¶¾“Petya”µÄ±äÖÖ£¬£¬£¬£¬£¬£¬²¡¶¾Èö²¥Àú³ÌʹÓõ½windowsµÄÁ½¸öÎó²î¡£¡£¡£¡£¡£µÚÒ»²½ÊÇʹÓÃCVE-2017-0199Îó²î·¢ËÍÓʼþ£¬£¬£¬£¬£¬£¬½«²¡¶¾Ìí¼ÓÔÚoffice¸½¼þÀ£¬£¬£¬£¬£¬PCÒ»µ©·­¿ª¸½¼þ£¬£¬£¬£¬£¬£¬µÚÒ»¸öÈö²¥µÄÔ´Í·±»Ñ¬È¾Àֳɡ£¡£¡£¡£¡£µÚ¶þ²½ÊÇͨ¹ýMS17-010£¨ÓÀºãÖ®À¶£©Îó²îºÍϵͳÈõ¿ÚÁî¾ÙÐÐÈö²¥¡£¡£¡£¡£¡£Îó²îµÄÏêϸʹÓÃÇéÐÎÈçÏ£º

Îó²îÒ»£ºCVE-2017-0199Îó²î

Îó²î˵Ã÷£ºCVE-2017-0199ÔÊÐí¹¥»÷ÕßʹÓôËÎó²îÓÕʹÓû§·­¿ª´¦Öóͷ£ÌØÊâ½á¹¹µÄOfficeÎļþÔÚÓû§ÏµÍ³ÉÏÖ´ÐÐí§ÒâÏÂÁ£¬£¬£¬£¬£¬´Ó¶ø¿ØÖÆÓû§ÏµÍ³¡£¡£¡£¡£¡£

ʹÓÃÒªÁ죺ʹÓøÃÎó²î£¬£¬£¬£¬£¬£¬ºÚ¿Í¿ÉÒÔ½«ÀÕË÷Èí¼þµÄ´úÂëǶÈëÁËofficeÎĵµÖУ¬£¬£¬£¬£¬£¬ÀýÈçword¡¢PPT¡¢ExcelµÈ£¬£¬£¬£¬£¬£¬×÷Ϊ¸½¼þαװ³ÉÇóÖ°¡¢¹ã¸æµÈͨ¹ýµç×ÓÓʼþÈö²¥¡£¡£¡£¡£¡£Óû§ÊÕµ½¾­ÓÉαװµÄÓʼþºó£¬£¬£¬£¬£¬£¬Ò»µ©·­¿ª£¬£¬£¬£¬£¬£¬ÀÕË÷²¡¶¾ÊͷųɿÉÖ´ÐÐÎļþ¡£¡£¡£¡£¡£

Îó²î¶þ£ºMS17-010£¨ÓÀºãÖ®À¶£©SMBÎó²î

Îó²î˵Ã÷£ºMS17-010£¨ÓÀºãÖ®À¶£©SMBÎó²îÊǽñÄê4Ô·½³Ìʽ×é֯鶵ÄÖ÷ÒªÎó²îÖ®Ò»¡£¡£¡£¡£¡£“ÓÀºãÖ®À¶”ʹÓÃWindows SMBÔ¶³ÌÌáȨÎó²î£¬£¬£¬£¬£¬£¬¿ÉÒÔ¹¥»÷¿ª·Å445 ¶Ë¿ÚµÄ Windows ϵͳ²¢ÌáÉýȨÏÞ¡£¡£¡£¡£¡£

ʹÓÃÒªÁ죺Ê×ÏÈ£¬£¬£¬£¬£¬£¬TCP ¶Ë¿Ú 445ÊÇÔÚWindows ϵͳÖÐÌṩ¾ÖÓòÍøÖÐÎļþ»ò´òÓ¡»ú¹²Ïí·þÎñ£¬£¬£¬£¬£¬£¬ºÚ¿ÍʵÑéÓëµçÄÔ445¶Ë¿Ú½¨ÉèÇëÇóÅþÁ¬£¬£¬£¬£¬£¬£¬Ò»µ©ÅþÁ¬Àֳɣ¬£¬£¬£¬£¬£¬¾ÍÄܹ»»ñµÃ¾ÖÓòÍøÄÚ¹²ÏíµÄÎļþ»òÐÅÏ¢¡£¡£¡£¡£¡£Í¨¹ýµÚÒ»¸öÎó²îѬȾµÄµÚһ̨PC¼Ì¶øʹÓÃMS17-010£¨ÓÀºãÖ®À¶£©SMBÎó²îѬȾ¾ÖÓòÍøÖпª·Å445¶Ë¿ÚµÄËùÓÐPC¡£¡£¡£¡£¡£

±¾´ÎÀÕË÷²¡¶¾ÁýÕÖµÄÖÕ¶ËÊÇwindows XP¼¶ÒÔÉϲÙ×÷ϵͳ£¬£¬£¬£¬£¬£¬µçÄÔ¡¢·þÎñÆ÷ѬȾÕâÖÖ²¡¶¾ºó»á±»¼ÓÃÜÌض¨ÀàÐÍÎļþ£¬£¬£¬£¬£¬£¬µ¼ÖÂϵͳÎÞ·¨Õý³£ÔËÐС£¡£¡£¡£¡£²î±ðÓڹŰåÀÕË÷Èí¼þ¼ÓÃÜÎļþµÄÐÐΪ£¬£¬£¬£¬£¬£¬“Petya”ÊÇÒ»¸ö½ÓÄÉ´ÅÅ̼ÓÃÜ·½·¨£¬£¬£¬£¬£¬£¬¼ÓÃÜÀֳɺ󣬣¬£¬£¬£¬£¬»áÏÔʾÀÕË÷ÐÅÏ¢µÄ½çÃ棬£¬£¬£¬£¬£¬ÈôÊÇÊܺ¦Õß²»Ö§¸¶Êê½ð£¬£¬£¬£¬£¬£¬»ù´¡ÎÞ·¨½øÈëϵͳ¡£¡£¡£¡£¡£

±»¼ÓÃܺóµÄÀÕË÷ÐÅÏ¢

Èý¡¢Çå¾²½¨Òé

1¡¢ ¶ñÒâÓʼþÌá·À

¸ÃÀÕË÷Èí¼þÊ×´ÎÈö²¥ÊÇͨ¹ýÓʼþ¾ÙÐеģ¬£¬£¬£¬£¬£¬¹Ê´Ë£¬£¬£¬£¬£¬£¬Óöµ½Ð¯´ø²»Ã÷office¸½¼þºÍ²»Ã÷Á´½ÓµÄÓʼþÇëÎðµã»÷¸½¼þ¡£¡£¡£¡£¡£

2¡¢ Õë¶ÔCVE-2017-0199¡¢MS-17-010Á½¸öÎó²îʵʱװÖÃÎó²î²¹¶¡

£¨CVE-2017-0199) RTFÎó²î²¹¶¡µØµã£º

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0199

S17-010£¨ÓÀºãÖ®À¶£©Îó²î²¹¶¡µØµã£º

https://technet.microsoft.com/en-us/library/security/ms17-010.aspx

3¡¢ ½ûÓÃWMI·þÎñ

https://msdn.microsoft.com/en-us/library/aa826517(v=vs.85).aspx

4¡¢ ·À»ðǽ·À»¤

aggame¹ÙÍøÍøÂçÒѸüзÀ»¤ÌØÕ÷¿â£¬£¬£¬£¬£¬£¬ÈôÊÇÄúÊÇaggame¹ÙÍøÈ«ÐÂÏÂÒ»´ú·À»ðǽ²úÆ·µÄÓû§£¬£¬£¬£¬£¬£¬Çëʵʱ¸üе½ÈçÏ°汾£º²¡¶¾Ñù±¾¿â£º49.00830£»£»£»£»£»£»£»£» IPSÌØÕ÷¿â£º11.00168

ËÄ¡¢×ܽ᣺

»ØÊדPetya”±äÖÖ²¡¶¾ºÍ“wannacry”ÊÂÎñ£¬£¬£¬£¬£¬£¬ÀÕË÷²¡¶¾ËùʹÓõÄÊֶβ¢²»ÊǺÜÊǸ߼¶µÄ¹¥»÷ÒªÁ죬£¬£¬£¬£¬£¬Ê¹ÓõÄÎó²îÒ²²¢·Ç0-dayÎó²î£¬£¬£¬£¬£¬£¬¶øÊÇ΢ÈíÔçÒÑÐû²¼Í¨¸æµÄÒÑÖªÎó²î£¬£¬£¬£¬£¬£¬Èö²¥µÄÒªº¦ÒòËØÔÚÓÚµçÄÔ»ò·þÎñÆ÷±£´æδʵʱ¸üеÄÎó²îºÍÈõ¿ÚÁî¡£¡£¡£¡£¡£Òò´Ë£¬£¬£¬£¬£¬£¬ÆóÒµºÍСÎÒ˽¼Ò¶¼Ó¦ÈÏÕæ˼Ë÷Ç徲ϵͳ½¨ÉèµÄ»ù´¡ÊÂÇ飬£¬£¬£¬£¬£¬Ð¡ÎÒ˽¼ÒµçÄÔӦʵʱװÖòÙ×÷ϵͳ²¹¶¡£¡£¡£¡£¡£¬£¬£¬£¬£¬£¬¾Ü¾øÈõ¿ÚÁî²¢°´ÆÚÌæ»»ÃÜÂ룬£¬£¬£¬£¬£¬Óöµ½²»Ã÷È·µÄÓʼþ²»ÒªÈÝÒ×·­¿ª¡£¡£¡£¡£¡£ÆóÒµÓû§Ó¦ÔÚÍøÂç½çÏß°²ÅÅ¿ÉÒÔʵʱÌṩÏìÓ¦ÌØÕ÷¿âºÍ·À»¤Õ½ÂÔµÄÇå¾²×°±¸£¬£¬£¬£¬£¬£¬¾¡Ô翪Æô·À»¤Õ½ÂÔ²¢ÊµÊ±¸üÐÂÌØÕ÷¿â¡£¡£¡£¡£¡£·À»¼ÓÚδȻ£¬£¬£¬£¬£¬£¬×öºÃÇå¾²£¬£¬£¬£¬£¬£¬ÆóÒµ²Å»ª¸üºÃµØÉú³¤¡£¡£¡£¡£¡£